Dataset statistics
| Number of variables | 59 |
|---|---|
| Number of observations | 50000 |
| Missing cells | 1418222 |
| Missing cells (%) | 48.1% |
| Duplicate rows | 0 |
| Duplicate rows (%) | 0.0% |
| Total size in memory | 22.5 MiB |
| Average record size in memory | 472.0 B |
Variable types
| CAT | 47 |
|---|---|
| NUM | 9 |
| BOOL | 3 |
Visibility has constant value "50000" | Constant |
EVENTDATA_BINARY has a high cardinality: 227 distinct values | High cardinality |
EVENTDATA_DATA has a high cardinality: 2398 distinct values | High cardinality |
EVENTDATA_DATA_PARAM1 has a high cardinality: 63 distinct values | High cardinality |
EVENTDATA_DATA_SCHANNELNAME has a high cardinality: 27717 distinct values | High cardinality |
EVENTDATA_DATA_USERNAME has a high cardinality: 5386 distinct values | High cardinality |
EVENTDATA_DATA_WORKSTATIONNAME has a high cardinality: 4002 distinct values | High cardinality |
FILENAME_INGEST has a high cardinality: 14146 distinct values | High cardinality |
LOCATION has a high cardinality: 77 distinct values | High cardinality |
SITE_COLLECTION has a high cardinality: 282 distinct values | High cardinality |
SYSTEM_COMPUTER has a high cardinality: 282 distinct values | High cardinality |
SYSTEM_COMPUTER_REVERSE has a high cardinality: 282 distinct values | High cardinality |
SYSTEM_TIMECREATED_SYSTEMTIME has a high cardinality: 49939 distinct values | High cardinality |
SYSTEM_EVENTID is highly correlated with EVENTDATA_DATA_SCHANNELTYPE and 1 other fields | High correlation |
EVENTDATA_DATA_SCHANNELTYPE is highly correlated with SYSTEM_EVENTID | High correlation |
SYSTEM_EVENTRECORDID is highly correlated with EVENTDATA_DATA_REQUESTID | High correlation |
EVENTDATA_DATA_REQUESTID is highly correlated with SYSTEM_EVENTRECORDID | High correlation |
USERDATA_EVENTXML_BINARYDATASIZE is highly correlated with SYSTEM_EVENTID | High correlation |
ARCHITECTURE has 16962 (33.9%) missing values | Missing |
DOMAIN has 16962 (33.9%) missing values | Missing |
DOMAINCONTROLLER has 16962 (33.9%) missing values | Missing |
DOMAINCONTROLLERNUMBER has 16962 (33.9%) missing values | Missing |
EVENTDATA_BINARY has 49655 (99.3%) missing values | Missing |
EVENTDATA_DATA has 47146 (94.3%) missing values | Missing |
EVENTDATA_DATA_ADDITIONALERRORMESSAGE has 49999 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_ADDITIONALINFORMATION has 49994 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_DN has 49999 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_DOMAINNAME has 11367 (22.7%) missing values | Missing |
EVENTDATA_DATA_ERRORMESSAGETEXT has 49999 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_HOSTNAME has 49999 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_PARAM1 has 49746 (99.5%) missing values | Missing |
EVENTDATA_DATA_PARAM2 has 49972 (99.9%) missing values | Missing |
EVENTDATA_DATA_PARAM3 has 49985 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_REASON has 49994 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_REQUESTID has 49993 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_SCHANNELNAME has 3243 (6.5%) missing values | Missing |
EVENTDATA_DATA_SCHANNELTYPE has 3243 (6.5%) missing values | Missing |
EVENTDATA_DATA_SUBJECTNAME has 49994 (> 99.9%) missing values | Missing |
EVENTDATA_DATA_USERNAME has 3243 (6.5%) missing values | Missing |
EVENTDATA_DATA_WORKSTATIONNAME has 5253 (10.5%) missing values | Missing |
EVENTDATA_NAME has 49740 (99.5%) missing values | Missing |
LOCATION has 16962 (33.9%) missing values | Missing |
SYSTEM_EVENTID_QUALIFIERS has 47031 (94.1%) missing values | Missing |
SYSTEM_EXECUTION_PROCESSID has 2372 (4.7%) missing values | Missing |
SYSTEM_EXECUTION_THREADID has 2372 (4.7%) missing values | Missing |
SYSTEM_OPCODE has 2372 (4.7%) missing values | Missing |
SYSTEM_PROVIDER_EVENTSOURCENAME has 49403 (98.8%) missing values | Missing |
SYSTEM_PROVIDER_GUID has 2372 (4.7%) missing values | Missing |
SYSTEM_SECURITY_USERID has 2629 (5.3%) missing values | Missing |
SYSTEM_VERSION has 2372 (4.7%) missing values | Missing |
USERDATA_EVENTXML_BINARYDATA has 49981 (> 99.9%) missing values | Missing |
USERDATA_EVENTXML_BINARYDATASIZE has 49981 (> 99.9%) missing values | Missing |
USERDATA_EVENTXML_PARAM1 has 49981 (> 99.9%) missing values | Missing |
USERDATA_EVENTXML_PARAM2 has 49990 (> 99.9%) missing values | Missing |
USERDATA_RMRESTARTEVENT_APPLICATIONS_APPLICATION has 49999 (> 99.9%) missing values | Missing |
USERDATA_RMRESTARTEVENT_NAPPLICATIONS has 49999 (> 99.9%) missing values | Missing |
USERDATA_RMRESTARTEVENT_REBOOTREASONS has 49999 (> 99.9%) missing values | Missing |
USERDATA_RMRESTARTEVENT_RMSESSIONID has 49999 (> 99.9%) missing values | Missing |
USERDATA_RMSESSIONEVENT_RMSESSIONID has 49998 (> 99.9%) missing values | Missing |
USERDATA_RMSESSIONEVENT_UTCSTARTTIME has 49998 (> 99.9%) missing values | Missing |
SYSTEM_EXECUTION_PROCESSID is highly skewed (γ1 = 29.09915413) | Skewed |
SYSTEM_TASK is highly skewed (γ1 = 36.62829847) | Skewed |
EVENTDATA_DATA_PARAM3 is uniformly distributed | Uniform |
SYSTEM_TIMECREATED_SYSTEMTIME is uniformly distributed | Uniform |
USERDATA_RMSESSIONEVENT_UTCSTARTTIME is uniformly distributed | Uniform |
Id has unique values | Unique |
SYSTEM_TASK has 2834 (5.7%) zeros | Zeros |
Reproduction
| Analysis started | 2020-09-27 00:32:57.508581 |
|---|---|
| Analysis finished | 2020-09-27 00:33:36.150967 |
| Duration | 38.64 seconds |
| Software version | pandas-profiling v2.9.0 |
| Download configuration | config.yaml |
| Distinct | 50000 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| 0980b0bfe564c4ff9b51ea6adf170aee | 1 |
|---|---|
| 00538d7bdde8fd771a9ec8f38b94443c | 1 |
| 0175ba9bfdc399d6f08d7fdbf038c3bc | 1 |
| 019eb19342b95c0e36e38b73d1afd58d | 1 |
| 01189c87b2689f8fb0d9f34fed603945 | 1 |
| Other values (49995) |
| Value | Count | Frequency (%) | |
| 0980b0bfe564c4ff9b51ea6adf170aee | 1 | < 0.1% | |
| 00538d7bdde8fd771a9ec8f38b94443c | 1 | < 0.1% | |
| 0175ba9bfdc399d6f08d7fdbf038c3bc | 1 | < 0.1% | |
| 019eb19342b95c0e36e38b73d1afd58d | 1 | < 0.1% | |
| 01189c87b2689f8fb0d9f34fed603945 | 1 | < 0.1% | |
| 03983bebca39af2fdd73f2e66de63d84 | 1 | < 0.1% | |
| 02b009fb15ee500a96bc361199e73e52 | 1 | < 0.1% | |
| 038f5d56b0954ecc718d92ff2536835e | 1 | < 0.1% | |
| 00458f07be88862368b2b80f6fd2787f | 1 | < 0.1% | |
| 29702bb27aefb36e61ff36ce34d1679c | 1 | < 0.1% | |
| Other values (49990) | 49990 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 50000 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 32 |
|---|---|
| Median length | 32 |
| Mean length | 32 |
| Min length | 32 |
Timestamp
Real number (ℝ≥0)
| Distinct | 49939 |
|---|---|
| Distinct (%) | 99.9% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1.599831309e+12 |
|---|---|
| Minimum | 1.5996096e+12 |
| Maximum | 1.600037885e+12 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 1.5996096e+12 |
|---|---|
| 5-th percentile | 1.5996261e+12 |
| Q1 | 1.599677307e+12 |
| median | 1.599834734e+12 |
| Q3 | 1.599975568e+12 |
| 95-th percentile | 1.60002258e+12 |
| Maximum | 1.600037885e+12 |
| Range | 428284487 |
| Interquartile range (IQR) | 298260585 |
Descriptive statistics
| Standard deviation | 140614566.6 |
|---|---|
| Coefficient of variation (CV) | 8.789337085e-05 |
| Kurtosis | -1.426179199 |
| Mean | 1.599831309e+12 |
| Median Absolute Deviation (MAD) | 148484458.5 |
| Skewness | -0.09087308757 |
| Sum | 7.999156547e+16 |
| Variance | 1.977245633e+16 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 1.599800649e+12 | 3 | < 0.1% | |
| 1.59967131e+12 | 2 | < 0.1% | |
| 1.599847819e+12 | 2 | < 0.1% | |
| 1.599855924e+12 | 2 | < 0.1% | |
| 1.599619522e+12 | 2 | < 0.1% | |
| 1.599613239e+12 | 2 | < 0.1% | |
| 1.599792752e+12 | 2 | < 0.1% | |
| 1.599854444e+12 | 2 | < 0.1% | |
| 1.599811205e+12 | 2 | < 0.1% | |
| 1.599834767e+12 | 2 | < 0.1% | |
| Other values (49929) | 49979 | > 99.9% |
| Value | Count | Frequency (%) | |
| 1.5996096e+12 | 1 | < 0.1% | |
| 1.599609601e+12 | 1 | < 0.1% | |
| 1.599609603e+12 | 1 | < 0.1% | |
| 1.599609606e+12 | 1 | < 0.1% | |
| 1.599609607e+12 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 1.600037885e+12 | 1 | < 0.1% | |
| 1.60003777e+12 | 1 | < 0.1% | |
| 1.600037754e+12 | 1 | < 0.1% | |
| 1.600037702e+12 | 1 | < 0.1% | |
| 1.600037673e+12 | 1 | < 0.1% |
Data Type
Categorical
| Distinct | 5 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| evtx-ntlm-c | |
|---|---|
| evtx-application-c | 2678 |
| evtx-dns_server-c | 253 |
| evtx-directory_service-c | 204 |
| evtx-dfs_replication-c | 108 |
| Value | Count | Frequency (%) | |
| evtx-ntlm-c | 46757 | 93.5% | |
| evtx-application-c | 2678 | 5.4% | |
| evtx-dns_server-c | 253 | 0.5% | |
| evtx-directory_service-c | 204 | 0.4% | |
| evtx-dfs_replication-c | 108 | 0.2% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 24 |
|---|---|
| Median length | 11 |
| Mean length | 11.48208 |
| Min length | 11 |
| Distinct | 1 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| U&FOUO |
|---|
| Value | Count | Frequency (%) | |
| U&FOUO | 50000 | 100.0% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 6 |
|---|---|
| Median length | 6 |
| Mean length | 6 |
| Min length | 6 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 16962 |
| Missing (%) | 33.9% |
| Memory size | 390.6 KiB |
| P | |
|---|---|
| p | 1106 |
| Value | Count | Frequency (%) | |
| P | 31932 | 63.9% | |
| p | 1106 | 2.2% | |
| (Missing) | 16962 | 33.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 1 |
| Mean length | 1.67848 |
| Min length | 1 |
| Distinct | 11 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 16962 |
| Missing (%) | 33.9% |
| Memory size | 390.6 KiB |
| NE | |
|---|---|
| SW | |
| SE | |
| NW | |
| se | 999 |
| Other values (6) | 510 |
| Value | Count | Frequency (%) | |
| NE | 10883 | 21.8% | |
| SW | 8324 | 16.6% | |
| SE | 7040 | 14.1% | |
| NW | 5282 | 10.6% | |
| se | 999 | 2.0% | |
| HQ | 337 | 0.7% | |
| nw | 103 | 0.2% | |
| DS | 56 | 0.1% | |
| CO | 7 | < 0.1% | |
| ds | 4 | < 0.1% | |
| (Missing) | 16962 | 33.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 2 |
| Mean length | 2.33924 |
| Min length | 2 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 16962 |
| Missing (%) | 33.9% |
| Memory size | 390.6 KiB |
| A1 | |
|---|---|
| a1 | 1106 |
| Value | Count | Frequency (%) | |
| A1 | 31932 | 63.9% | |
| a1 | 1106 | 2.2% | |
| (Missing) | 16962 | 33.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 2 |
| Mean length | 2.33924 |
| Min length | 2 |
| Distinct | 8 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 16962 |
| Missing (%) | 33.9% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1.904867123 |
|---|---|
| Minimum | 1 |
| Maximum | 8 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 1 |
|---|---|
| 5-th percentile | 1 |
| Q1 | 1 |
| median | 2 |
| Q3 | 2 |
| 95-th percentile | 4 |
| Maximum | 8 |
| Range | 7 |
| Interquartile range (IQR) | 1 |
Descriptive statistics
| Standard deviation | 0.8393707828 |
|---|---|
| Coefficient of variation (CV) | 0.44064532 |
| Kurtosis | 1.379832323 |
| Mean | 1.904867123 |
| Median Absolute Deviation (MAD) | 0 |
| Skewness | 1.097070662 |
| Sum | 62933 |
| Variance | 0.704543311 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=8)
| Value | Count | Frequency (%) | |
| 2 | 17684 | 35.4% | |
| 1 | 10566 | 21.1% | |
| 4 | 2395 | 4.8% | |
| 3 | 2284 | 4.6% | |
| 5 | 91 | 0.2% | |
| 6 | 15 | < 0.1% | |
| 7 | 2 | < 0.1% | |
| 8 | 1 | < 0.1% | |
| (Missing) | 16962 | 33.9% |
| Value | Count | Frequency (%) | |
| 1 | 10566 | 21.1% | |
| 2 | 17684 | 35.4% | |
| 3 | 2284 | 4.6% | |
| 4 | 2395 | 4.8% | |
| 5 | 91 | 0.2% |
| Value | Count | Frequency (%) | |
| 8 | 1 | < 0.1% | |
| 7 | 2 | < 0.1% | |
| 6 | 15 | < 0.1% | |
| 5 | 91 | 0.2% | |
| 4 | 2395 | 4.8% |
| Distinct | 227 |
|---|---|
| Distinct (%) | 65.8% |
| Missing | 49655 |
| Missing (%) | 99.3% |
| Memory size | 390.6 KiB |
| 154800000A000000100000004800550041004300410030004400530056003000530051004C00300031000000070000006D00610073007400650072000000 | |
|---|---|
| 2A230000 | 13 |
| 22000000 | 7 |
| 660400C00800000014000000 | 5 |
| 7B46343243463138392D304443392D344643322D383030412D4243304637303834383031387D3030303032326430343831353432323734386161623133383132343637626266393331373030303030303030 | 2 |
| Other values (222) |
| Value | Count | Frequency (%) | |
| 154800000A000000100000004800550041004300410030004400530056003000530051004C00300031000000070000006D00610073007400650072000000 | 95 | 0.2% | |
| 2A230000 | 13 | < 0.1% | |
| 22000000 | 7 | < 0.1% | |
| 660400C00800000014000000 | 5 | < 0.1% | |
| 7B46343243463138392D304443392D344643322D383030412D4243304637303834383031387D3030303032326430343831353432323734386161623133383132343637626266393331373030303030303030 | 2 | < 0.1% | |
| 7B45323745373446302D304541442D344335442D384636462D3143393139324432344141357D3030303065666530653037363630393763323832303365303530636637613763333964623030303030393034 | 2 | < 0.1% | |
| 6D3528000100000001000000046E6173650264730461726D79036D696C00000600010F43414D5057305534344244533032360000000100FF000000000000 | 1 | < 0.1% | |
| A03B28000100000001000000046E6173650264730461726D79036D696C00000600010F43414D50505257464A3746463030310000000100FF000000000000 | 1 | < 0.1% | |
| 3E0C28000100000001000000046E6173650264730461726D79036D696C00000600010F43414D5057483130414144533031350000000100FF000000000000 | 1 | < 0.1% | |
| F31028000100000001000000046E6173650264730461726D79036D696C00000600010E45543030323142374437333338330000000100FF000000000000 | 1 | < 0.1% | |
| Other values (217) | 217 | 0.4% | |
| (Missing) | 49655 | 99.3% |
Frequencies of value counts
Unique
| Unique | 221 ? |
|---|---|
| Unique (%) | 64.1% |
Histogram of lengths of the category
Length
| Max length | 336 |
|---|---|
| Median length | 3 |
| Mean length | 3.78582 |
| Min length | 3 |
| Distinct | 2398 |
|---|---|
| Distinct (%) | 84.0% |
| Missing | 47146 |
| Missing (%) | 94.3% |
| Memory size | 390.6 KiB |
| ERROR: openkey_set_protection Unable to autoload cardset in silent mode | 178 |
|---|---|
| caller=svchost.exe | 48 |
| 6.3.9600.19101 | 46 |
| C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 | 36 |
| C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 | 27 |
| Other values (2393) |
| Value | Count | Frequency (%) | |
| ERROR: openkey_set_protection Unable to autoload cardset in silent mode | 178 | 0.4% | |
| caller=svchost.exe | 48 | 0.1% | |
| 6.3.9600.19101 | 46 | 0.1% | |
| C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 | 36 | 0.1% | |
| C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000 | 27 | 0.1% | |
| [CLIENT: <local machine>],DS\svc.omsql.ds | 24 | < 0.1% | |
| [CLIENT: <local machine>],NASW\SVC.CTNOSC.WSMT.SCOM | 18 | < 0.1% | |
| EventID=1120 Update in Progress | 10 | < 0.1% | |
| EventID=1118 Update Finished | 8 | < 0.1% | |
| [CLIENT: 207.133.219.135],DS\svc.omaction.ds | 7 | < 0.1% | |
| Other values (2388) | 2452 | 4.9% | |
| (Missing) | 47146 | 94.3% |
Frequencies of value counts
Unique
| Unique | 2344 ? |
|---|---|
| Unique (%) | 82.1% |
Histogram of lengths of the category
Length
| Max length | 1922 |
|---|---|
| Median length | 3 |
| Mean length | 14.49846 |
| Min length | 2 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| ldap: 0x20: 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=Computers,OU=USAMMA,OU=AMLC,OU=AMC,OU=Detrick,OU=Installations,DC=nae,DC=ds,DC=army,DC=mil' |
|---|
| Value | Count | Frequency (%) | |
| ldap: 0x20: 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=Computers,OU=USAMMA,OU=AMLC,OU=AMC,OU=Detrick,OU=Installations,DC=nae,DC=ds,DC=army,DC=mil' | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 192 |
|---|---|
| Median length | 3 |
| Mean length | 3.00378 |
| Min length | 3 |
| Distinct | 2 |
|---|---|
| Distinct (%) | 33.3% |
| Missing | 49994 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| Denied by Policy Module | |
|---|---|
| Denied by Policy Module 0x8007208d, The requester's Active Directory object could not be retrieved. CN=KNOXW6J8AATBT26,OU=_Baseline_Imaging,OU=Knox,OU=Installations,DC=nase,DC=ds,DC=army,DC=mil ldap: 0x20: 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=_Baseline_Imaging,OU=Knox,OU=Installations,DC=nase,DC=ds,DC=army,DC=mil' |
| Value | Count | Frequency (%) | |
| Denied by Policy Module | 4 | < 0.1% | |
| Denied by Policy Module 0x8007208d, The requester's Active Directory object could not be retrieved. CN=KNOXW6J8AATBT26,OU=_Baseline_Imaging,OU=Knox,OU=Installations,DC=nase,DC=ds,DC=army,DC=mil ldap: 0x20: 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=_Baseline_Imaging,OU=Knox,OU=Installations,DC=nase,DC=ds,DC=army,DC=mil' | 2 | < 0.1% | |
| (Missing) | 49994 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 371 |
|---|---|
| Median length | 3 |
| Mean length | 3.01632 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| CN=DETRW05JAANB074,OU=Computers,OU=USAMMA,OU=AMLC,OU=AMC,OU=Detrick,OU=Installations,DC=nae,DC=ds,DC=army,DC=mil |
|---|
| Value | Count | Frequency (%) | |
| CN=DETRW05JAANB074,OU=Computers,OU=USAMMA,OU=AMLC,OU=AMC,OU=Detrick,OU=Installations,DC=nae,DC=ds,DC=army,DC=mil | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 112 |
|---|---|
| Median length | 3 |
| Mean length | 3.00218 |
| Min length | 3 |
| Distinct | 20 |
|---|---|
| Distinct (%) | 0.1% |
| Missing | 11367 |
| Missing (%) | 22.7% |
| Memory size | 390.6 KiB |
| NAE | |
|---|---|
| NASW | |
| NASE | |
| NANW | |
| nasw.ds.army.mil | |
| Other values (15) |
| Value | Count | Frequency (%) | |
| NAE | 8892 | 17.8% | |
| NASW | 6795 | 13.6% | |
| NASE | 5516 | 11.0% | |
| NANW | 4885 | 9.8% | |
| nasw.ds.army.mil | 3554 | 7.1% | |
| nae | 1983 | 4.0% | |
| nase.ds.army.mil | 1748 | 3.5% | |
| nasw | 1396 | 2.8% | |
| nase | 1307 | 2.6% | |
| nae.ds.army.mil | 1305 | 2.6% | |
| Other values (10) | 1252 | 2.5% | |
| (Missing) | 11367 | 22.7% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 16 |
|---|---|
| Median length | 4 |
| Mean length | 5.2202 |
| Min length | 2 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| Directory object not found. 0x8007208d (WIN32: 8333 ERROR_DS_OBJ_NOT_FOUND) |
|---|
| Value | Count | Frequency (%) | |
| Directory object not found. 0x8007208d (WIN32: 8333 ERROR_DS_OBJ_NOT_FOUND) | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 75 |
|---|---|
| Median length | 3 |
| Mean length | 3.00144 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| BRAGA1NEVXD0001.nae.ds.army.mil |
|---|
| Value | Count | Frequency (%) | |
| BRAGA1NEVXD0001.nae.ds.army.mil | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 31 |
|---|---|
| Median length | 3 |
| Mean length | 3.00056 |
| Min length | 3 |
| Distinct | 63 |
|---|---|
| Distinct (%) | 24.8% |
| Missing | 49746 |
| Missing (%) | 99.5% |
| Memory size | 390.6 KiB |
| nae.ds.army.mil | 14 |
|---|---|
| 172.17.32.94 | 10 |
| 147.169.56.140 | 10 |
| 10.53.88.226 | 7 |
| 10.53.9.57 | 7 |
| Other values (58) |
| Value | Count | Frequency (%) | |
| nae.ds.army.mil | 14 | < 0.1% | |
| 172.17.32.94 | 10 | < 0.1% | |
| 147.169.56.140 | 10 | < 0.1% | |
| 10.53.88.226 | 7 | < 0.1% | |
| 10.53.9.57 | 7 | < 0.1% | |
| 10.53.32.74 | 7 | < 0.1% | |
| 0000208F: NameErr: DSID-03100225, problem 2006 (BAD_NAME), data 8349, best match of: 'DC=#brokerAddr#,DC=nae.ds.army.mil,cn=MicrosoftDNS,DC=DomainDnsZones,DC=nae,DC=ds,DC=army,DC=mil' | 7 | < 0.1% | |
| 160.150.115.78 | 7 | < 0.1% | |
| 10.53.32.90 | 7 | < 0.1% | |
| 147.169.57.59 | 6 | < 0.1% | |
| Other values (53) | 172 | 0.3% | |
| (Missing) | 49746 | 99.5% |
Frequencies of value counts
Unique
| Unique | 12 ? |
|---|---|
| Unique (%) | 4.7% |
Histogram of lengths of the category
Length
| Max length | 184 |
|---|---|
| Median length | 3 |
| Mean length | 3.07346 |
| Min length | 3 |
| Distinct | 13 |
|---|---|
| Distinct (%) | 46.4% |
| Missing | 49972 |
| Missing (%) | 99.9% |
| Memory size | 390.6 KiB |
| 0000208F: NameErr: DSID-03100225, problem 2006 (BAD_NAME), data 8349, best match of: 'DC=#brokerAddr#,DC=nae.ds.army.mil,cn=MicrosoftDNS,DC=DomainDnsZones,DC=nae,DC=ds,DC=army,DC=mil' | |
|---|---|
| SuppressDuplicateDuration | |
| . | 1 |
| nae.ds.army.mil.dns | 1 |
| nasw. | 1 |
| Other values (8) |
| Value | Count | Frequency (%) | |
| 0000208F: NameErr: DSID-03100225, problem 2006 (BAD_NAME), data 8349, best match of: 'DC=#brokerAddr#,DC=nae.ds.army.mil,cn=MicrosoftDNS,DC=DomainDnsZones,DC=nae,DC=ds,DC=army,DC=mil' | 13 | < 0.1% | |
| SuppressDuplicateDuration | 4 | < 0.1% | |
| . | 1 | < 0.1% | |
| nae.ds.army.mil.dns | 1 | < 0.1% | |
| nasw. | 1 | < 0.1% | |
| generichost-71-189.hood.army.mil. | 1 | < 0.1% | |
| hoodw4nhaaa1sw4.nasw.ds.army.mil. | 1 | < 0.1% | |
| army.mil. | 1 | < 0.1% | |
| rcccw4nhaaa1s02.nasw.ds.army.mil. | 1 | < 0.1% | |
| service.ds.army.mil.dns | 1 | < 0.1% | |
| Other values (3) | 3 | < 0.1% | |
| (Missing) | 49972 | 99.9% |
Frequencies of value counts
Unique
| Unique | 11 ? |
|---|---|
| Unique (%) | 39.3% |
Histogram of lengths of the category
Length
| Max length | 184 |
|---|---|
| Median length | 3 |
| Mean length | 3.05212 |
| Min length | 1 |
| Distinct | 13 |
|---|---|
| Distinct (%) | 86.7% |
| Missing | 49985 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| Software\Microsoft\COM3\Eventlog | |
|---|---|
| Software\Microsoft\EventSystem\EventLog | |
| BRAGA1HQVXD0001.dahq.ds.army.mil | |
| MEADW4NHAAA1A01.nae.ds.army.mil | |
| APGRW4NHAAA1NE3.nae.ds.army.mil | |
| Other values (8) |
| Value | Count | Frequency (%) | |
| Software\Microsoft\COM3\Eventlog | 2 | < 0.1% | |
| Software\Microsoft\EventSystem\EventLog | 2 | < 0.1% | |
| BRAGA1HQVXD0001.dahq.ds.army.mil | 1 | < 0.1% | |
| MEADW4NHAAA1A01.nae.ds.army.mil | 1 | < 0.1% | |
| APGRW4NHAAA1NE3.nae.ds.army.mil | 1 | < 0.1% | |
| ORLAA1SEPHUB001.nase.ds.army.mil | 1 | < 0.1% | |
| HAWTA1SWP000001.nasw.ds.army.mil | 1 | < 0.1% | |
| GORDA1SEP000005.nase.ds.army.mil | 1 | < 0.1% | |
| CAMPA1SEP000003.nase.ds.army.mil | 1 | < 0.1% | |
| DRUMA1NEP000003.nae.ds.army.mil | 1 | < 0.1% | |
| Other values (3) | 3 | < 0.1% | |
| (Missing) | 49985 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 11 ? |
|---|---|
| Unique (%) | 73.3% |
Histogram of lengths of the category
Length
| Max length | 39 |
|---|---|
| Median length | 3 |
| Mean length | 3.00892 |
| Min length | 3 |
| Distinct | 2 |
|---|---|
| Distinct (%) | 33.3% |
| Missing | 49994 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| The DNS name is unavailable and cannot be added to the Subject Alternate name. 0x8009480f (-2146875377 CERTSRV_E_SUBJECT_DNS_REQUIRED) | |
|---|---|
| Directory object not found. 0x8007208d (WIN32: 8333 ERROR_DS_OBJ_NOT_FOUND) |
| Value | Count | Frequency (%) | |
| The DNS name is unavailable and cannot be added to the Subject Alternate name. 0x8009480f (-2146875377 CERTSRV_E_SUBJECT_DNS_REQUIRED) | 4 | < 0.1% | |
| Directory object not found. 0x8007208d (WIN32: 8333 ERROR_DS_OBJ_NOT_FOUND) | 2 | < 0.1% | |
| (Missing) | 49994 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 134 |
|---|---|
| Median length | 3 |
| Mean length | 3.01336 |
| Min length | 3 |
| Distinct | 7 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49993 |
| Missing (%) | > 99.9% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1023088 |
|---|---|
| Minimum | 1002957 |
| Maximum | 1048641 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 1002957 |
|---|---|
| 5-th percentile | 1003666.2 |
| Q1 | 1005422 |
| median | 1005778 |
| Q3 | 1046698 |
| 95-th percentile | 1048149.9 |
| Maximum | 1048641 |
| Range | 45684 |
| Interquartile range (IQR) | 41276 |
Descriptive statistics
| Standard deviation | 22719.65396 |
|---|---|
| Coefficient of variation (CV) | 0.02220694013 |
| Kurtosis | -2.77755928 |
| Mean | 1023088 |
| Median Absolute Deviation (MAD) | 2821 |
| Skewness | 0.3710156087 |
| Sum | 7161616 |
| Variance | 516182676 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=7)
| Value | Count | Frequency (%) | |
| 1047004 | 1 | < 0.1% | |
| 1046392 | 1 | < 0.1% | |
| 1005778 | 1 | < 0.1% | |
| 1005523 | 1 | < 0.1% | |
| 1005321 | 1 | < 0.1% | |
| 1002957 | 1 | < 0.1% | |
| 1048641 | 1 | < 0.1% | |
| (Missing) | 49993 | > 99.9% |
| Value | Count | Frequency (%) | |
| 1002957 | 1 | < 0.1% | |
| 1005321 | 1 | < 0.1% | |
| 1005523 | 1 | < 0.1% | |
| 1005778 | 1 | < 0.1% | |
| 1046392 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 1048641 | 1 | < 0.1% | |
| 1047004 | 1 | < 0.1% | |
| 1046392 | 1 | < 0.1% | |
| 1005778 | 1 | < 0.1% | |
| 1005523 | 1 | < 0.1% |
| Distinct | 27717 |
|---|---|
| Distinct (%) | 59.3% |
| Missing | 3243 |
| Missing (%) | 6.5% |
| Memory size | 390.6 KiB |
| LEWIA0P6064 | 1423 |
|---|---|
| RRADA0DFIMSAN4 | 1146 |
| RADFC2A11V007TT | 407 |
| RUCKA0011ARTS01 | 396 |
| SAMHA02199 | 316 |
| Other values (27712) |
| Value | Count | Frequency (%) | |
| LEWIA0P6064 | 1423 | 2.8% | |
| RRADA0DFIMSAN4 | 1146 | 2.3% | |
| RADFC2A11V007TT | 407 | 0.8% | |
| RUCKA0011ARTS01 | 396 | 0.8% | |
| SAMHA02199 | 316 | 0.6% | |
| CARLP0PROWFE001 | 307 | 0.6% | |
| REDSTONEAPP6 | 210 | 0.4% | |
| SAMHA02200 | 202 | 0.4% | |
| BELVA40315DM058 | 198 | 0.4% | |
| BELVA00315DM137 | 161 | 0.3% | |
| Other values (27707) | 41991 | 84.0% | |
| (Missing) | 3243 | 6.5% |
Frequencies of value counts
Unique
| Unique | 22304 ? |
|---|---|
| Unique (%) | 47.7% |
Histogram of lengths of the category
Length
| Max length | 15 |
|---|---|
| Median length | 15 |
| Mean length | 13.80028 |
| Min length | 3 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 3243 |
| Missing (%) | 6.5% |
| Memory size | 390.6 KiB |
| 2 | |
|---|---|
| 3 | 832 |
| Value | Count | Frequency (%) | |
| 2 | 45925 | 91.8% | |
| 3 | 832 | 1.7% | |
| (Missing) | 3243 | 6.5% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 3 |
| Mean length | 3 |
| Min length | 3 |
| Distinct | 5 |
|---|---|
| Distinct (%) | 83.3% |
| Missing | 49994 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| NASE\KNOXW6J8AATBT26$ | |
|---|---|
| NAE\DRUMW0XQAANBE45$ | |
| NASE\STEWW6TCAAWK532$ | |
| NASW\BLISW1J000NBZ8T$ | |
| NASE\BUCHW6XDAANB016$ |
| Value | Count | Frequency (%) | |
| NASE\KNOXW6J8AATBT26$ | 2 | < 0.1% | |
| NAE\DRUMW0XQAANBE45$ | 1 | < 0.1% | |
| NASE\STEWW6TCAAWK532$ | 1 | < 0.1% | |
| NASW\BLISW1J000NBZ8T$ | 1 | < 0.1% | |
| NASE\BUCHW6XDAANB016$ | 1 | < 0.1% | |
| (Missing) | 49994 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 4 ? |
|---|---|
| Unique (%) | 66.7% |
Histogram of lengths of the category
Length
| Max length | 21 |
|---|---|
| Median length | 3 |
| Mean length | 3.00214 |
| Min length | 3 |
| Distinct | 5386 |
|---|---|
| Distinct (%) | 11.5% |
| Missing | 3243 |
| Missing (%) | 6.5% |
| Memory size | 390.6 KiB |
| SVC.NESSUS1.NC1BRAG | 3227 |
|---|---|
| SVC.HOOD.CYBRSECSCAN | 2218 |
| svc.scans.lewi | 1790 |
| svc.acas.samh | 1563 |
| SVC.CAIRS.LEWI | 1423 |
| Other values (5381) |
| Value | Count | Frequency (%) | |
| SVC.NESSUS1.NC1BRAG | 3227 | 6.5% | |
| SVC.HOOD.CYBRSECSCAN | 2218 | 4.4% | |
| svc.scans.lewi | 1790 | 3.6% | |
| svc.acas.samh | 1563 | 3.1% | |
| SVC.CAIRS.LEWI | 1423 | 2.8% | |
| svc.camp.acaswks2 | 1393 | 2.8% | |
| Svc.acas.belv | 1171 | 2.3% | |
| svc.ruck.acas | 1113 | 2.2% | |
| svc.retinascan.blis | 1006 | 2.0% | |
| svc.scan.wsmr | 875 | 1.8% | |
| Other values (5376) | 30978 | 62.0% | |
| (Missing) | 3243 | 6.5% |
Frequencies of value counts
Unique
| Unique | 4155 ? |
|---|---|
| Unique (%) | 8.9% |
Histogram of lengths of the category
Length
| Max length | 36 |
|---|---|
| Median length | 15 |
| Mean length | 14.83232 |
| Min length | 3 |
| Distinct | 4002 |
|---|---|
| Distinct (%) | 8.9% |
| Missing | 5253 |
| Missing (%) | 10.5% |
| Memory size | 390.6 KiB |
| LEWIC2P6062 | 1423 |
|---|---|
| acas-atec152 | 620 |
| MINWINPC | 573 |
| TOBYFW11CRR5FW1 | 551 |
| acas-rde070 | 378 |
| Other values (3997) |
| Value | Count | Frequency (%) | |
| LEWIC2P6062 | 1423 | 2.8% | |
| acas-atec152 | 620 | 1.2% | |
| MINWINPC | 573 | 1.1% | |
| TOBYFW11CRR5FW1 | 551 | 1.1% | |
| acas-rde070 | 378 | 0.8% | |
| RADFC2A11V004TT | 344 | 0.7% | |
| acas-atec150 | 328 | 0.7% | |
| BRAGNETCB6NS007 | 320 | 0.6% | |
| BRAGNETCB6NS004 | 319 | 0.6% | |
| BRAGNETCB6NS002 | 315 | 0.6% | |
| Other values (3992) | 39576 | 79.2% | |
| (Missing) | 5253 | 10.5% |
Frequencies of value counts
Unique
| Unique | 2720 ? |
|---|---|
| Unique (%) | 6.1% |
Histogram of lengths of the category
Length
| Max length | 32 |
|---|---|
| Median length | 15 |
| Mean length | 13.40302 |
| Min length | 2 |
| Distinct | 12 |
|---|---|
| Distinct (%) | 4.6% |
| Missing | 49740 |
| Missing (%) | 99.5% |
| Memory size | 390.6 KiB |
| DNS_EVENT_BAD_UPDATE_PACKET | |
|---|---|
| DNS_EVENT_DS_ZONE_ENUM_FAILED | 13 |
| DNS_EVENT_DS_INTERFACE_ERROR | 12 |
| DNS_EVENT_ZONE_LOAD_OK | 11 |
| DNS_EVENT_BAD_ZONE_TRANSFER_REQUEST | 8 |
| Other values (7) | 13 |
| Value | Count | Frequency (%) | |
| DNS_EVENT_BAD_UPDATE_PACKET | 203 | 0.4% | |
| DNS_EVENT_DS_ZONE_ENUM_FAILED | 13 | < 0.1% | |
| DNS_EVENT_DS_INTERFACE_ERROR | 12 | < 0.1% | |
| DNS_EVENT_ZONE_LOAD_OK | 11 | < 0.1% | |
| DNS_EVENT_BAD_ZONE_TRANSFER_REQUEST | 8 | < 0.1% | |
| MSG_DN_CERT_DENIED_WITH_INFO | 6 | < 0.1% | |
| DNS_EVENT_FILE_OPEN_ERROR | 2 | < 0.1% | |
| MSG_W_CERT_PUBLICATION_HOST_NAME | 1 | < 0.1% | |
| DNS_EVENT_ZONE_LOAD_COMPLETE | 1 | < 0.1% | |
| DNS_EVENT_STARTUP_OK | 1 | < 0.1% | |
| Other values (2) | 2 | < 0.1% | |
| (Missing) | 49740 | 99.5% |
Frequencies of value counts
Unique
| Unique | 5 ? |
|---|---|
| Unique (%) | 1.9% |
Histogram of lengths of the category
Length
| Max length | 35 |
|---|---|
| Median length | 3 |
| Mean length | 3.1258 |
| Min length | 3 |
| Distinct | 14146 |
|---|---|
| Distinct (%) | 28.3% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| ds.army.mil_huaca2issca0001_application_2020_09_09_huaca2issca0001-application-2020-09-09-23-06-05-746.xml.zip | 289 |
|---|---|
| ds.army.mil_huaca2issca0001_application_2020_09_12_huaca2issca0001-application-2020-09-12-09-29-03-922.xml.zip | 239 |
| ds.army.mil_braga2dsviss001_application_2020_09_12_braga2dsviss001-application-2020-09-12-03-41-45-077.xml.zip | 224 |
| ds.army.mil_huaca2issca0001_application_2020_09_13_huaca2issca0001-application-2020-09-13-14-49-28-852.xml.zip | 182 |
| ds.army.mil_huaca2issca0002_application_2020_09_11_huaca2issca0002-application-2020-09-11-05-25-12-607.xml.zip | 178 |
| Other values (14141) |
| Value | Count | Frequency (%) | |
| ds.army.mil_huaca2issca0001_application_2020_09_09_huaca2issca0001-application-2020-09-09-23-06-05-746.xml.zip | 289 | 0.6% | |
| ds.army.mil_huaca2issca0001_application_2020_09_12_huaca2issca0001-application-2020-09-12-09-29-03-922.xml.zip | 239 | 0.5% | |
| ds.army.mil_braga2dsviss001_application_2020_09_12_braga2dsviss001-application-2020-09-12-03-41-45-077.xml.zip | 224 | 0.4% | |
| ds.army.mil_huaca2issca0001_application_2020_09_13_huaca2issca0001-application-2020-09-13-14-49-28-852.xml.zip | 182 | 0.4% | |
| ds.army.mil_huaca2issca0002_application_2020_09_11_huaca2issca0002-application-2020-09-11-05-25-12-607.xml.zip | 178 | 0.4% | |
| ds.army.mil_rcccw4nhaaa0rfs_application_2020_09_13_rcccw4nhaaa0rfs-application-2020-09-13-07-01-45-179.xml.zip | 160 | 0.3% | |
| ds.army.mil_rcccw4nhaaa0rfs_application_2020_09_10_rcccw4nhaaa0rfs-application-2020-09-10-13-45-45-534.xml.zip | 131 | 0.3% | |
| ds.army.mil_huaca0dsv0sql01_application_2020_09_10_huaca0dsv0sql01-application-2020-09-10-03-00-51-624.xml.zip | 95 | 0.2% | |
| ds.army.mil_braga2dsviss002_application_2020_09_09_braga2dsviss002-application-2020-09-09-21-55-11-197.xml.zip,ds.army.mil_braga2dsviss002_application_2020_09_10_braga2dsviss002-application-2020-09-10-21-02-59-108.xml.zip | 78 | 0.2% | |
| ds.army.mil_braga2dsviss002_application_2020_09_11_braga2dsviss002-application-2020-09-11-21-55-11-140.xml.zip,ds.army.mil_braga2dsviss002_application_2020_09_13_braga2dsviss002-application-2020-09-13-09-19-10-734.xml.zip | 68 | 0.1% | |
| Other values (14136) | 48356 | 96.7% |
Frequencies of value counts
Unique
| Unique | 2853 ? |
|---|---|
| Unique (%) | 5.7% |
Histogram of lengths of the category
Length
| Max length | 347 |
|---|---|
| Median length | 101 |
| Mean length | 105.35518 |
| Min length | 96 |
| Distinct | 77 |
|---|---|
| Distinct (%) | 0.2% |
| Missing | 16962 |
| Missing (%) | 33.9% |
| Memory size | 390.6 KiB |
| RADF | 1956 |
|---|---|
| RUCK | 1675 |
| BELV | 1582 |
| WSMR | 1351 |
| APGR | 1351 |
| Other values (72) |
| Value | Count | Frequency (%) | |
| RADF | 1956 | 3.9% | |
| RUCK | 1675 | 3.4% | |
| BELV | 1582 | 3.2% | |
| WSMR | 1351 | 2.7% | |
| APGR | 1351 | 2.7% | |
| CAMP | 1299 | 2.6% | |
| HOOD | 1082 | 2.2% | |
| ROCK | 1054 | 2.1% | |
| RRAD | 1025 | 2.1% | |
| POLK | 911 | 1.8% | |
| Other values (67) | 19752 | 39.5% | |
| (Missing) | 16962 | 33.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 4 |
|---|---|
| Median length | 4 |
| Mean length | 3.66076 |
| Min length | 3 |
NETWORK_COLLECTION
Categorical
| Distinct | 8 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| nasw.ds.army.mil | |
|---|---|
| nae.ds.army.mil | |
| nase.ds.army.mil | |
| nanw.ds.army.mil | |
| ds.army.mil | |
| Other values (3) | 420 |
| Value | Count | Frequency (%) | |
| nasw.ds.army.mil | 13560 | 27.1% | |
| nae.ds.army.mil | 12726 | 25.5% | |
| nase.ds.army.mil | 12363 | 24.7% | |
| nanw.ds.army.mil | 8813 | 17.6% | |
| ds.army.mil | 2118 | 4.2% | |
| dahq.ds.army.mil | 382 | 0.8% | |
| service.ds.army.mil | 31 | 0.1% | |
| conus.ds.army.mil | 7 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 19 |
|---|---|
| Median length | 16 |
| Mean length | 15.53568 |
| Min length | 11 |
| Distinct | 282 |
|---|---|
| Distinct (%) | 0.6% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| radfa1nep000002 | 1817 |
|---|---|
| jblmw4nhaah0nw1 | 1638 |
| bragw4nhaah0se4 | 1299 |
| rucka1sep000001 | 1160 |
| wsmra1swp000002 | 956 |
| Other values (277) |
| Value | Count | Frequency (%) | |
| radfa1nep000002 | 1817 | 3.6% | |
| jblmw4nhaah0nw1 | 1638 | 3.3% | |
| bragw4nhaah0se4 | 1299 | 2.6% | |
| rucka1sep000001 | 1160 | 2.3% | |
| wsmra1swp000002 | 956 | 1.9% | |
| jbsaw4nhaah0sw3 | 810 | 1.6% | |
| jbsaw4nhaah0sw2 | 791 | 1.6% | |
| rocka1nwp000002 | 786 | 1.6% | |
| campa1sep000004 | 778 | 1.6% | |
| huaca2issca0001 | 765 | 1.5% | |
| Other values (272) | 39200 | 78.4% |
Frequencies of value counts
Unique
| Unique | 9 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 15 |
|---|---|
| Median length | 15 |
| Mean length | 15 |
| Min length | 15 |
SYSTEM_CHANNEL
Categorical
| Distinct | 5 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| Microsoft-Windows-NTLM/Operational | |
|---|---|
| Application | 2678 |
| DNS Server | 253 |
| Directory Service | 204 |
| DFS Replication | 108 |
| Value | Count | Frequency (%) | |
| Microsoft-Windows-NTLM/Operational | 46757 | 93.5% | |
| Application | 2678 | 5.4% | |
| DNS Server | 253 | 0.5% | |
| Directory Service | 204 | 0.4% | |
| DFS Replication | 108 | 0.2% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 34 |
|---|---|
| Median length | 34 |
| Mean length | 32.53628 |
| Min length | 10 |
| Distinct | 282 |
|---|---|
| Distinct (%) | 0.6% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| RADFA1NEP000002.nae.ds.army.mil | 1817 |
|---|---|
| JBLMW4NHAAH0NW1.nanw.ds.army.mil | 1638 |
| BRAGW4NHAAH0SE4.nase.ds.army.mil | 1299 |
| RUCKA1SEP000001.nase.ds.army.mil | 1160 |
| WSMRA1SWP000002.nasw.ds.army.mil | 956 |
| Other values (277) |
| Value | Count | Frequency (%) | |
| RADFA1NEP000002.nae.ds.army.mil | 1817 | 3.6% | |
| JBLMW4NHAAH0NW1.nanw.ds.army.mil | 1638 | 3.3% | |
| BRAGW4NHAAH0SE4.nase.ds.army.mil | 1299 | 2.6% | |
| RUCKA1SEP000001.nase.ds.army.mil | 1160 | 2.3% | |
| WSMRA1SWP000002.nasw.ds.army.mil | 956 | 1.9% | |
| JBSAW4NHAAH0SW3.nasw.ds.army.mil | 810 | 1.6% | |
| JBSAW4NHAAH0SW2.nasw.ds.army.mil | 791 | 1.6% | |
| ROCKA1NWP000002.nanw.ds.army.mil | 786 | 1.6% | |
| campa1sep000004.nase.ds.army.mil | 778 | 1.6% | |
| HUACA2ISSCA0001.ds.army.mil | 765 | 1.5% | |
| Other values (272) | 39200 | 78.4% |
Frequencies of value counts
Unique
| Unique | 9 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 35 |
|---|---|
| Median length | 32 |
| Mean length | 31.53568 |
| Min length | 27 |
| Distinct | 282 |
|---|---|
| Distinct (%) | 0.6% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| mil.army.ds.nae.RADFA1NEP000002 | 1817 |
|---|---|
| mil.army.ds.nanw.JBLMW4NHAAH0NW1 | 1638 |
| mil.army.ds.nase.BRAGW4NHAAH0SE4 | 1299 |
| mil.army.ds.nase.RUCKA1SEP000001 | 1160 |
| mil.army.ds.nasw.WSMRA1SWP000002 | 956 |
| Other values (277) |
| Value | Count | Frequency (%) | |
| mil.army.ds.nae.RADFA1NEP000002 | 1817 | 3.6% | |
| mil.army.ds.nanw.JBLMW4NHAAH0NW1 | 1638 | 3.3% | |
| mil.army.ds.nase.BRAGW4NHAAH0SE4 | 1299 | 2.6% | |
| mil.army.ds.nase.RUCKA1SEP000001 | 1160 | 2.3% | |
| mil.army.ds.nasw.WSMRA1SWP000002 | 956 | 1.9% | |
| mil.army.ds.nasw.JBSAW4NHAAH0SW3 | 810 | 1.6% | |
| mil.army.ds.nasw.JBSAW4NHAAH0SW2 | 791 | 1.6% | |
| mil.army.ds.nanw.ROCKA1NWP000002 | 786 | 1.6% | |
| mil.army.ds.nase.campa1sep000004 | 778 | 1.6% | |
| mil.army.ds.HUACA2ISSCA0001 | 765 | 1.5% | |
| Other values (272) | 39200 | 78.4% |
Frequencies of value counts
Unique
| Unique | 9 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 35 |
|---|---|
| Median length | 32 |
| Mean length | 31.53568 |
| Min length | 27 |
| Distinct | 112 |
|---|---|
| Distinct (%) | 0.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 7591.73466 |
|---|---|
| Minimum | 0 |
| Maximum | 26009 |
| Zeros | 2 |
| Zeros (%) | < 0.1% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 0 |
|---|---|
| 5-th percentile | 1066 |
| Q1 | 8004 |
| median | 8004 |
| Q3 | 8004 |
| 95-th percentile | 8004 |
| Maximum | 26009 |
| Range | 26009 |
| Interquartile range (IQR) | 0 |
Descriptive statistics
| Standard deviation | 1851.887257 |
|---|---|
| Coefficient of variation (CV) | 0.2439346658 |
| Kurtosis | 13.48118963 |
| Mean | 7591.73466 |
| Median Absolute Deviation (MAD) | 0 |
| Skewness | -2.891594898 |
| Sum | 379586733 |
| Variance | 3429486.413 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 8004 | 45474 | 90.9% | |
| 1 | 1329 | 2.7% | |
| 8006 | 832 | 1.7% | |
| 8005 | 451 | 0.9% | |
| 2 | 436 | 0.9% | |
| 5509 | 203 | 0.4% | |
| 3 | 179 | 0.4% | |
| 1226 | 146 | 0.3% | |
| 18453 | 95 | 0.2% | |
| 1003 | 84 | 0.2% | |
| Other values (102) | 771 | 1.5% |
| Value | Count | Frequency (%) | |
| 0 | 2 | < 0.1% | |
| 1 | 1329 | 2.7% | |
| 2 | 436 | 0.9% | |
| 3 | 179 | 0.4% | |
| 4 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 26009 | 1 | < 0.1% | |
| 18453 | 95 | 0.2% | |
| 16384 | 47 | 0.1% | |
| 12308 | 1 | < 0.1% | |
| 12291 | 1 | < 0.1% |
| Distinct | 6 |
|---|---|
| Distinct (%) | 0.2% |
| Missing | 47031 |
| Missing (%) | 94.1% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 20456.54732 |
|---|---|
| Minimum | 0 |
| Maximum | 49152 |
| Zeros | 207 |
| Zeros (%) | 0.4% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 0 |
|---|---|
| 5-th percentile | 0 |
| Q1 | 16384 |
| median | 16384 |
| Q3 | 16384 |
| 95-th percentile | 49152 |
| Maximum | 49152 |
| Range | 49152 |
| Interquartile range (IQR) | 0 |
Descriptive statistics
| Standard deviation | 11436.16958 |
|---|---|
| Coefficient of variation (CV) | 0.5590469104 |
| Kurtosis | 1.049847758 |
| Mean | 20456.54732 |
| Median Absolute Deviation (MAD) | 0 |
| Skewness | 0.9981560111 |
| Sum | 60735489 |
| Variance | 130785974.6 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=6)
| Value | Count | Frequency (%) | |
| 16384 | 2019 | 4.0% | |
| 32768 | 493 | 1.0% | |
| 49152 | 231 | 0.5% | |
| 0 | 207 | 0.4% | |
| 8192 | 18 | < 0.1% | |
| 1 | 1 | < 0.1% | |
| (Missing) | 47031 | 94.1% |
| Value | Count | Frequency (%) | |
| 0 | 207 | 0.4% | |
| 1 | 1 | < 0.1% | |
| 8192 | 18 | < 0.1% | |
| 16384 | 2019 | 4.0% | |
| 32768 | 493 | 1.0% |
| Value | Count | Frequency (%) | |
| 49152 | 231 | 0.5% | |
| 32768 | 493 | 1.0% | |
| 16384 | 2019 | 4.0% | |
| 8192 | 18 | < 0.1% | |
| 1 | 1 | < 0.1% |
| Distinct | 49998 |
|---|---|
| Distinct (%) | > 99.9% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 545777847.4 |
|---|---|
| Minimum | 804 |
| Maximum | 3726796661 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 804 |
|---|---|
| 5-th percentile | 20438143.8 |
| Q1 | 183448650.8 |
| median | 401328394.5 |
| Q3 | 670812193.5 |
| 95-th percentile | 1923303092 |
| Maximum | 3726796661 |
| Range | 3726795857 |
| Interquartile range (IQR) | 487363542.8 |
Descriptive statistics
| Standard deviation | 532864281.2 |
|---|---|
| Coefficient of variation (CV) | 0.976339153 |
| Kurtosis | 5.517912812 |
| Mean | 545777847.4 |
| Median Absolute Deviation (MAD) | 230710277.5 |
| Skewness | 2.117106019 |
| Sum | 2.728889237e+13 |
| Variance | 2.839443422e+17 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 94223 | 2 | < 0.1% | |
| 33099 | 2 | < 0.1% | |
| 635443197 | 1 | < 0.1% | |
| 34635077 | 1 | < 0.1% | |
| 981583186 | 1 | < 0.1% | |
| 74896720 | 1 | < 0.1% | |
| 71642447 | 1 | < 0.1% | |
| 731391310 | 1 | < 0.1% | |
| 517520663 | 1 | < 0.1% | |
| 299513164 | 1 | < 0.1% | |
| Other values (49988) | 49988 | > 99.9% |
| Value | Count | Frequency (%) | |
| 804 | 1 | < 0.1% | |
| 847 | 1 | < 0.1% | |
| 1815 | 1 | < 0.1% | |
| 1819 | 1 | < 0.1% | |
| 2012 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 3726796661 | 1 | < 0.1% | |
| 3726789878 | 1 | < 0.1% | |
| 3726789789 | 1 | < 0.1% | |
| 3726778535 | 1 | < 0.1% | |
| 3726776987 | 1 | < 0.1% |
| Distinct | 143 |
|---|---|
| Distinct (%) | 0.3% |
| Missing | 2372 |
| Missing (%) | 4.7% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 851.9048459 |
|---|---|
| Minimum | 0 |
| Maximum | 15996 |
| Zeros | 395 |
| Zeros (%) | 0.8% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 0 |
|---|---|
| 5-th percentile | 684 |
| Q1 | 852 |
| median | 872 |
| Q3 | 892 |
| 95-th percentile | 932 |
| Maximum | 15996 |
| Range | 15996 |
| Interquartile range (IQR) | 40 |
Descriptive statistics
| Standard deviation | 308.3068241 |
|---|---|
| Coefficient of variation (CV) | 0.3619028881 |
| Kurtosis | 1100.906041 |
| Mean | 851.9048459 |
| Median Absolute Deviation (MAD) | 20 |
| Skewness | 29.09915413 |
| Sum | 40574524 |
| Variance | 95053.0978 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 876 | 5529 | 11.1% | |
| 864 | 3919 | 7.8% | |
| 872 | 3370 | 6.7% | |
| 908 | 3090 | 6.2% | |
| 868 | 2939 | 5.9% | |
| 860 | 2199 | 4.4% | |
| 880 | 2187 | 4.4% | |
| 912 | 1841 | 3.7% | |
| 884 | 1780 | 3.6% | |
| 920 | 1606 | 3.2% | |
| Other values (133) | 19168 | 38.3% | |
| (Missing) | 2372 | 4.7% |
| Value | Count | Frequency (%) | |
| 0 | 395 | 0.8% | |
| 128 | 1 | < 0.1% | |
| 408 | 9 | < 0.1% | |
| 440 | 2 | < 0.1% | |
| 480 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 15996 | 1 | < 0.1% | |
| 15864 | 1 | < 0.1% | |
| 15572 | 1 | < 0.1% | |
| 15136 | 1 | < 0.1% | |
| 14920 | 1 | < 0.1% |
| Distinct | 5249 |
|---|---|
| Distinct (%) | 11.0% |
| Missing | 2372 |
| Missing (%) | 4.7% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 10566.69186 |
|---|---|
| Minimum | 0 |
| Maximum | 24536 |
| Zeros | 395 |
| Zeros (%) | 0.8% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 0 |
|---|---|
| 5-th percentile | 1556 |
| Q1 | 7272 |
| median | 10804 |
| Q3 | 14360 |
| 95-th percentile | 18372 |
| Maximum | 24536 |
| Range | 24536 |
| Interquartile range (IQR) | 7088 |
Descriptive statistics
| Standard deviation | 5075.050181 |
|---|---|
| Coefficient of variation (CV) | 0.4802875155 |
| Kurtosis | -0.5526653828 |
| Mean | 10566.69186 |
| Median Absolute Deviation (MAD) | 3552 |
| Skewness | -0.1430156309 |
| Sum | 503270400 |
| Variance | 25756134.34 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) | |
| 0 | 395 | 0.8% | |
| 2108 | 160 | 0.3% | |
| 7440 | 133 | 0.3% | |
| 716 | 119 | 0.2% | |
| 7464 | 106 | 0.2% | |
| 2416 | 105 | 0.2% | |
| 6196 | 105 | 0.2% | |
| 2436 | 102 | 0.2% | |
| 1036 | 98 | 0.2% | |
| 2156 | 90 | 0.2% | |
| Other values (5239) | 46215 | 92.4% | |
| (Missing) | 2372 | 4.7% |
| Value | Count | Frequency (%) | |
| 0 | 395 | 0.8% | |
| 32 | 2 | < 0.1% | |
| 36 | 17 | < 0.1% | |
| 124 | 2 | < 0.1% | |
| 128 | 1 | < 0.1% |
| Value | Count | Frequency (%) | |
| 24536 | 1 | < 0.1% | |
| 24492 | 1 | < 0.1% | |
| 24464 | 1 | < 0.1% | |
| 24412 | 1 | < 0.1% | |
| 23912 | 1 | < 0.1% |
SYSTEM_KEYWORDS
Categorical
| Distinct | 10 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| 0x8000000000000000 | |
|---|---|
| 0x80000000000000 | 2672 |
| 0x8000000000000002 | 203 |
| 0x8080000000000000 | 202 |
| 0xa0000000000000 | 95 |
| Other values (5) | 50 |
| Value | Count | Frequency (%) | |
| 0x8000000000000000 | 46778 | 93.6% | |
| 0x80000000000000 | 2672 | 5.3% | |
| 0x8000000000000002 | 203 | 0.4% | |
| 0x8080000000000000 | 202 | 0.4% | |
| 0xa0000000000000 | 95 | 0.2% | |
| 0x8000000000000010 | 25 | 0.1% | |
| 0x8000000000020000 | 13 | < 0.1% | |
| 0x8000000000080000 | 8 | < 0.1% | |
| 0x8000000000001000 | 3 | < 0.1% | |
| 0x8000000000010000 | 1 | < 0.1% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 18 |
|---|---|
| Median length | 18 |
| Mean length | 17.88932 |
| Min length | 16 |
SYSTEM_LEVEL
Categorical
| Distinct | 4 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| 4 | |
|---|---|
| 3 | 513 |
| 2 | 293 |
| 0 | 211 |
| Value | Count | Frequency (%) | |
| 4 | 48983 | 98.0% | |
| 3 | 513 | 1.0% | |
| 2 | 293 | 0.6% | |
| 0 | 211 | 0.4% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 1 |
|---|---|
| Median length | 1 |
| Mean length | 1 |
| Min length | 1 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 2372 |
| Missing (%) | 4.7% |
| Memory size | 390.6 KiB |
| 0 | |
|---|---|
| 1 | 1 |
| (Missing) | 2372 |
| Value | Count | Frequency (%) | |
| 0 | 47627 | 95.3% | |
| 1 | 1 | < 0.1% | |
| (Missing) | 2372 | 4.7% |
| Distinct | 11 |
|---|---|
| Distinct (%) | 1.8% |
| Missing | 49403 |
| Missing (%) | 98.8% |
| Memory size | 390.6 KiB |
| Software Protection Platform Service | |
|---|---|
| NTDS Replication | |
| NTDS General | 17 |
| Perflib | 13 |
| NTDS Database | 10 |
| Other values (6) | 23 |
| Value | Count | Frequency (%) | |
| Software Protection Platform Service | 368 | 0.7% | |
| NTDS Replication | 166 | 0.3% | |
| NTDS General | 17 | < 0.1% | |
| Perflib | 13 | < 0.1% | |
| NTDS Database | 10 | < 0.1% | |
| PerfNet | 9 | < 0.1% | |
| NTDS KCC | 6 | < 0.1% | |
| NTDS LDAP | 3 | < 0.1% | |
| COM+ | 2 | < 0.1% | |
| EventSystem | 2 | < 0.1% | |
| (Missing) | 49403 | 98.8% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 0.2% |
Histogram of lengths of the category
Length
| Max length | 36 |
|---|---|
| Median length | 3 |
| Mean length | 3.29428 |
| Min length | 3 |
| Distinct | 15 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 2372 |
| Missing (%) | 4.7% |
| Memory size | 390.6 KiB |
| E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | |
|---|---|
| E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156 | 368 |
| 71A551F5-C893-4849-886B-B5EC8502641E | 253 |
| 0e8478c5-3605-4e8c-8497-1e730c959516 | 202 |
| 13B197BD-7CEE-4B4E-8DD0-59314CE374CE | 13 |
| Other values (10) | 35 |
| Value | Count | Frequency (%) | |
| E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | 46757 | 93.5% | |
| E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156 | 368 | 0.7% | |
| 71A551F5-C893-4849-886B-B5EC8502641E | 253 | 0.5% | |
| 0e8478c5-3605-4e8c-8497-1e730c959516 | 202 | 0.4% | |
| 13B197BD-7CEE-4B4E-8DD0-59314CE374CE | 13 | < 0.1% | |
| CAB2B8A5-49B9-4EEC-B1B0-FAC21DA05A3B | 9 | < 0.1% | |
| 6A71D062-9AFE-4F35-AD08-52134F85DFB9 | 7 | < 0.1% | |
| 122EE297-BB47-41AE-B265-1CA8D1886D40 | 6 | < 0.1% | |
| 0888E5EF-9B98-4695-979D-E92CE4247224 | 3 | < 0.1% | |
| 899daace-4868-4295-afcd-9eb8fb497561 | 2 | < 0.1% | |
| Other values (5) | 8 | < 0.1% | |
| (Missing) | 2372 | 4.7% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 36 |
|---|---|
| Median length | 36 |
| Mean length | 34.43448 |
| Min length | 3 |
SYSTEM_PROVIDER_NAME
Categorical
| Distinct | 38 |
|---|---|
| Distinct (%) | 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| Microsoft-Windows-Security-Netlogon | |
|---|---|
| nCipherLog | 1744 |
| Microsoft-Windows-Security-SPP | 368 |
| Microsoft-Windows-DNS-Server-Service | 253 |
| Microsoft-Windows-ActiveDirectory_DomainService | 202 |
| Other values (33) | 676 |
| Value | Count | Frequency (%) | |
| Microsoft-Windows-Security-Netlogon | 46757 | 93.5% | |
| nCipherLog | 1744 | 3.5% | |
| Microsoft-Windows-Security-SPP | 368 | 0.7% | |
| Microsoft-Windows-DNS-Server-Service | 253 | 0.5% | |
| Microsoft-Windows-ActiveDirectory_DomainService | 202 | 0.4% | |
| nCipher CSP | 178 | 0.4% | |
| DFSR | 108 | 0.2% | |
| MSSQLSERVER | 95 | 0.2% | |
| Windows Error Reporting | 77 | 0.2% | |
| ESENT | 69 | 0.1% | |
| Other values (28) | 149 | 0.3% |
Frequencies of value counts
Unique
| Unique | 8 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 47 |
|---|---|
| Median length | 35 |
| Mean length | 33.8421 |
| Min length | 3 |
| Distinct | 37 |
|---|---|
| Distinct (%) | 0.1% |
| Missing | 2629 |
| Missing (%) | 5.3% |
| Memory size | 390.6 KiB |
| S-1-5-18 | |
|---|---|
| S-1-5-7 | 197 |
| S-1-5-21-583907252-1532298954-1801674531-51609 | 24 |
| S-1-5-21-4101780369-38368224-130243791-4238293 | 20 |
| S-1-5-21-583907252-1532298954-1801674531-51605 | 20 |
| Other values (32) | 44 |
| Value | Count | Frequency (%) | |
| S-1-5-18 | 47066 | 94.1% | |
| S-1-5-7 | 197 | 0.4% | |
| S-1-5-21-583907252-1532298954-1801674531-51609 | 24 | < 0.1% | |
| S-1-5-21-4101780369-38368224-130243791-4238293 | 20 | < 0.1% | |
| S-1-5-21-583907252-1532298954-1801674531-51605 | 20 | < 0.1% | |
| S-1-5-21-583907252-1532298954-1801674531-51610 | 11 | < 0.1% | |
| S-1-5-21-583907252-1532298954-1801674531-51607 | 3 | < 0.1% | |
| S-1-5-21-3676333592-1006736145-1283606961-270170 | 1 | < 0.1% | |
| S-1-5-21-507921405-1645522239-682003330-72112 | 1 | < 0.1% | |
| S-1-5-21-3822721094-983390456-1902330015-10727449 | 1 | < 0.1% | |
| Other values (27) | 27 | 0.1% | |
| (Missing) | 2629 | 5.3% |
Frequencies of value counts
Unique
| Unique | 30 ? |
|---|---|
| Unique (%) | 0.1% |
Histogram of lengths of the category
Length
| Max length | 49 |
|---|---|
| Median length | 8 |
| Mean length | 7.8159 |
| Min length | 3 |
| Distinct | 15 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1.96948 |
|---|---|
| Minimum | 0 |
| Maximum | 100 |
| Zeros | 2834 |
| Zeros (%) | 5.7% |
| Memory size | 390.6 KiB |
Quantile statistics
| Minimum | 0 |
|---|---|
| 5-th percentile | 0 |
| Q1 | 2 |
| median | 2 |
| Q3 | 2 |
| 95-th percentile | 2 |
| Maximum | 100 |
| Range | 100 |
| Interquartile range (IQR) | 0 |
Descriptive statistics
| Standard deviation | 2.519594312 |
|---|---|
| Coefficient of variation (CV) | 1.279319573 |
| Kurtosis | 1418.887118 |
| Mean | 1.96948 |
| Median Absolute Deviation (MAD) | 0 |
| Skewness | 36.62829847 |
| Sum | 98474 |
| Variance | 6.348355497 |
| Monotocity | Not monotonic |
Histogram with fixed size bins (bins=15)
| Value | Count | Frequency (%) | |
| 2 | 46759 | 93.5% | |
| 0 | 2834 | 5.7% | |
| 5 | 162 | 0.3% | |
| 4 | 95 | 0.2% | |
| 1 | 66 | 0.1% | |
| 100 | 31 | 0.1% | |
| 10 | 11 | < 0.1% | |
| 22 | 9 | < 0.1% | |
| 7 | 9 | < 0.1% | |
| 9 | 8 | < 0.1% | |
| Other values (5) | 16 | < 0.1% |
| Value | Count | Frequency (%) | |
| 0 | 2834 | 5.7% | |
| 1 | 66 | 0.1% | |
| 2 | 46759 | 93.5% | |
| 3 | 5 | < 0.1% | |
| 4 | 95 | 0.2% |
| Value | Count | Frequency (%) | |
| 100 | 31 | 0.1% | |
| 22 | 9 | < 0.1% | |
| 18 | 4 | < 0.1% | |
| 16 | 1 | < 0.1% | |
| 12 | 3 | < 0.1% |
| Distinct | 49939 |
|---|---|
| Distinct (%) | 99.9% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 390.6 KiB |
| 2020-09-11T05:04:09Z | 3 |
|---|---|
| 2020-09-11T06:59:40Z | 2 |
| 2020-09-13T07:05:18Z | 2 |
| 2020-09-11T08:00:05Z | 2 |
| 2020-09-11T07:49:15.722Z | 2 |
| Other values (49934) |
| Value | Count | Frequency (%) | |
| 2020-09-11T05:04:09Z | 3 | < 0.1% | |
| 2020-09-11T06:59:40Z | 2 | < 0.1% | |
| 2020-09-13T07:05:18Z | 2 | < 0.1% | |
| 2020-09-11T08:00:05Z | 2 | < 0.1% | |
| 2020-09-11T07:49:15.722Z | 2 | < 0.1% | |
| 2020-09-11T03:04:07Z | 2 | < 0.1% | |
| 2020-09-09T01:15:06Z | 2 | < 0.1% | |
| 2020-09-11T20:25:24Z | 2 | < 0.1% | |
| 2020-09-11T18:10:19Z | 2 | < 0.1% | |
| 2020-09-09T02:45:22Z | 2 | < 0.1% | |
| Other values (49929) | 49979 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 49879 ? |
|---|---|
| Unique (%) | 99.8% |
Histogram of lengths of the category
Length
| Max length | 24 |
|---|---|
| Median length | 24 |
| Mean length | 23.6708 |
| Min length | 20 |
| Distinct | 2 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 2372 |
| Missing (%) | 4.7% |
| Memory size | 390.6 KiB |
| 0 | |
|---|---|
| 2 | 1 |
| Value | Count | Frequency (%) | |
| 0 | 47627 | 95.3% | |
| 2 | 1 | < 0.1% | |
| (Missing) | 2372 | 4.7% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | < 0.1% |
Histogram of lengths of the category
Length
| Max length | 3 |
|---|---|
| Median length | 3 |
| Mean length | 3 |
| Min length | 3 |
| Distinct | 8 |
|---|---|
| Distinct (%) | 42.1% |
| Missing | 49981 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 7E000000 | |
|---|---|
| 0200000000000000 | |
| FEDF0300FFDF0300D6050000 | |
| DE930300DF930300D6050000 | |
| 2CD303002DD30300D6050000 | |
| Other values (3) |
| Value | Count | Frequency (%) | |
| 7E000000 | 9 | < 0.1% | |
| 0200000000000000 | 4 | < 0.1% | |
| FEDF0300FFDF0300D6050000 | 1 | < 0.1% | |
| DE930300DF930300D6050000 | 1 | < 0.1% | |
| 2CD303002DD30300D6050000 | 1 | < 0.1% | |
| A8D203004ED30300A9D203004FD30300 | 1 | < 0.1% | |
| C6840300C7840300D6050000 | 1 | < 0.1% | |
| 2EAA03002FAA0300D6050000 | 1 | < 0.1% | |
| (Missing) | 49981 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 6 ? |
|---|---|
| Unique (%) | 31.6% |
Histogram of lengths of the category
Length
| Max length | 32 |
|---|---|
| Median length | 3 |
| Mean length | 3.00462 |
| Min length | 3 |
| Distinct | 4 |
|---|---|
| Distinct (%) | 21.1% |
| Missing | 49981 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 4 | |
|---|---|
| 12 | |
| 8 | |
| 16 |
| Value | Count | Frequency (%) | |
| 4 | 9 | < 0.1% | |
| 12 | 5 | < 0.1% | |
| 8 | 4 | < 0.1% | |
| 16 | 1 | < 0.1% | |
| (Missing) | 49981 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 5.3% |
Histogram of lengths of the category
Length
| Max length | 4 |
|---|---|
| Median length | 3 |
| Mean length | 3.00012 |
| Min length | 3 |
| Distinct | 4 |
|---|---|
| Distinct (%) | 21.1% |
| Missing | 49981 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| NPSrvHost | |
|---|---|
| WmiApRpl | |
| BITS | |
| InterceptCountersManager |
| Value | Count | Frequency (%) | |
| NPSrvHost | 6 | < 0.1% | |
| WmiApRpl | 6 | < 0.1% | |
| BITS | 4 | < 0.1% | |
| InterceptCountersManager | 3 | < 0.1% | |
| (Missing) | 49981 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 24 |
|---|---|
| Median length | 3 |
| Mean length | 3.00266 |
| Min length | 3 |
| Distinct | 2 |
|---|---|
| Distinct (%) | 20.0% |
| Missing | 49990 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| WmiApRpl | |
|---|---|
| C:\Windows\System32\bitsperf.dll |
| Value | Count | Frequency (%) | |
| WmiApRpl | 6 | < 0.1% | |
| C:\Windows\System32\bitsperf.dll | 4 | < 0.1% | |
| (Missing) | 49990 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Histogram of lengths of the category
Length
| Max length | 32 |
|---|---|
| Median length | 3 |
| Mean length | 3.00292 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| Active Directory Domain Services,CNG Key Isolation,DFS Replication,DNS Server,EMET_Agent,Encrypting File System (EFS),Intersite Messaging,Kerberos Key Distribution Center,Microsoft EMET Service,Netlogon,ProV,Security Accounts Manager |
|---|
| Value | Count | Frequency (%) | |
| Active Directory Domain Services,CNG Key Isolation,DFS Replication,DNS Server,EMET_Agent,Encrypting File System (EFS),Intersite Messaging,Kerberos Key Distribution Center,Microsoft EMET Service,Netlogon,ProV,Security Accounts Manager | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 233 |
|---|---|
| Median length | 3 |
| Mean length | 3.0046 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 12 |
|---|
| Value | Count | Frequency (%) | |
| 12 | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 4 |
|---|---|
| Median length | 3 |
| Mean length | 3.00002 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 10 |
|---|
| Value | Count | Frequency (%) | |
| 10 | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 1 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 4 |
|---|---|
| Median length | 3 |
| Mean length | 3.00002 |
| Min length | 3 |
| Distinct | 1 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49999 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 0 | 1 |
|---|---|
| (Missing) |
| Value | Count | Frequency (%) | |
| 0 | 1 | < 0.1% | |
| (Missing) | 49999 | > 99.9% |
| Distinct | 1 |
|---|---|
| Distinct (%) | 50.0% |
| Missing | 49998 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 0 | 2 |
|---|---|
| (Missing) |
| Value | Count | Frequency (%) | |
| 0 | 2 | < 0.1% | |
| (Missing) | 49998 | > 99.9% |
| Distinct | 2 |
|---|---|
| Distinct (%) | 100.0% |
| Missing | 49998 |
| Missing (%) | > 99.9% |
| Memory size | 390.6 KiB |
| 2020-09-11T21:24:06.836866900Z | |
|---|---|
| 2020-09-09T05:29:10.333552700Z |
| Value | Count | Frequency (%) | |
| 2020-09-11T21:24:06.836866900Z | 1 | < 0.1% | |
| 2020-09-09T05:29:10.333552700Z | 1 | < 0.1% | |
| (Missing) | 49998 | > 99.9% |
Frequencies of value counts
Unique
| Unique | 2 ? |
|---|---|
| Unique (%) | 100.0% |
Histogram of lengths of the category
Length
| Max length | 30 |
|---|---|
| Median length | 3 |
| Mean length | 3.00108 |
| Min length | 3 |
Pearson's r
The Pearson's correlation coefficient (r) is a measure of linear correlation between two variables. It's value lies between -1 and +1, -1 indicating total negative linear correlation, 0 indicating no linear correlation and 1 indicating total positive linear correlation. Furthermore, r is invariant under separate changes in location and scale of the two variables, implying that for a linear function the angle to the x-axis does not affect r.To calculate r for two variables X and Y, one divides the covariance of X and Y by the product of their standard deviations.
Spearman's ρ
The Spearman's rank correlation coefficient (ρ) is a measure of monotonic correlation between two variables, and is therefore better in catching nonlinear monotonic correlations than Pearson's r. It's value lies between -1 and +1, -1 indicating total negative monotonic correlation, 0 indicating no monotonic correlation and 1 indicating total positive monotonic correlation.To calculate ρ for two variables X and Y, one divides the covariance of the rank variables of X and Y by the product of their standard deviations.
Kendall's τ
Similarly to Spearman's rank correlation coefficient, the Kendall rank correlation coefficient (τ) measures ordinal association between two variables. It's value lies between -1 and +1, -1 indicating total negative correlation, 0 indicating no correlation and 1 indicating total positive correlation.To calculate τ for two variables X and Y, one determines the number of concordant and discordant pairs of observations. τ is given by the number of concordant pairs minus the discordant pairs divided by the total number of pairs.
Phik (φk)
Phik (φk) is a new and practical correlation coefficient that works consistently between categorical, ordinal and interval variables, captures non-linear dependency and reverts to the Pearson correlation coefficient in case of a bivariate normal input distribution. There is extensive documentation available here.First rows
| Id | Timestamp | Data Type | Visibility | ARCHITECTURE | DOMAIN | DOMAINCONTROLLER | DOMAINCONTROLLERNUMBER | EVENTDATA_BINARY | EVENTDATA_DATA | EVENTDATA_DATA_ADDITIONALERRORMESSAGE | EVENTDATA_DATA_ADDITIONALINFORMATION | EVENTDATA_DATA_DN | EVENTDATA_DATA_DOMAINNAME | EVENTDATA_DATA_ERRORMESSAGETEXT | EVENTDATA_DATA_HOSTNAME | EVENTDATA_DATA_PARAM1 | EVENTDATA_DATA_PARAM2 | EVENTDATA_DATA_PARAM3 | EVENTDATA_DATA_REASON | EVENTDATA_DATA_REQUESTID | EVENTDATA_DATA_SCHANNELNAME | EVENTDATA_DATA_SCHANNELTYPE | EVENTDATA_DATA_SUBJECTNAME | EVENTDATA_DATA_USERNAME | EVENTDATA_DATA_WORKSTATIONNAME | EVENTDATA_NAME | FILENAME_INGEST | LOCATION | NETWORK_COLLECTION | SITE_COLLECTION | SYSTEM_CHANNEL | SYSTEM_COMPUTER | SYSTEM_COMPUTER_REVERSE | SYSTEM_EVENTID | SYSTEM_EVENTID_QUALIFIERS | SYSTEM_EVENTRECORDID | SYSTEM_EXECUTION_PROCESSID | SYSTEM_EXECUTION_THREADID | SYSTEM_KEYWORDS | SYSTEM_LEVEL | SYSTEM_OPCODE | SYSTEM_PROVIDER_EVENTSOURCENAME | SYSTEM_PROVIDER_GUID | SYSTEM_PROVIDER_NAME | SYSTEM_SECURITY_USERID | SYSTEM_TASK | SYSTEM_TIMECREATED_SYSTEMTIME | SYSTEM_VERSION | USERDATA_EVENTXML_BINARYDATA | USERDATA_EVENTXML_BINARYDATASIZE | USERDATA_EVENTXML_PARAM1 | USERDATA_EVENTXML_PARAM2 | USERDATA_RMRESTARTEVENT_APPLICATIONS_APPLICATION | USERDATA_RMRESTARTEVENT_NAPPLICATIONS | USERDATA_RMRESTARTEVENT_REBOOTREASONS | USERDATA_RMRESTARTEVENT_RMSESSIONID | USERDATA_RMSESSIONEVENT_RMSESSIONID | USERDATA_RMSESSIONEVENT_UTCSTARTTIME | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 007f61f414ceb5b8f267cd0c39bc7f22 | 1599964934000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | 2020-09-12 22:42:14 t2252: nFast server: Notice: RemoteTarget Rt1 broke (RemoteServerFailed, INET/172.20.10.5/9004 (InvalidModule)) | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_braga2dsviss002_application_2020_09_13_braga2dsviss002-application-2020-09-13-09-19-10-734.xml.zip | NaN | ds.army.mil | braga2dsviss002 | Application | BRAGA2DSVISS002.ds.army.mil | mil.army.ds.BRAGA2DSVISS002 | 1 | 16384.0 | 24276631 | NaN | NaN | 0x80000000000000 | 4 | NaN | NaN | NaN | nCipherLog | NaN | 0 | 2020-09-13T02:42:14Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 1 | 00d0863e16446a9c6a11019af2541f69 | 1599998754000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | 2020-09-13 05:05:54 t2320: Hardserver [FP]: Remote server error: NST Nc238707 shutting down whilst expecting a SetupMiddle message: (UserCancelled) | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_huaca2issca0001_application_2020_09_13_huaca2issca0001-application-2020-09-13-14-49-28-852.xml.zip | NaN | ds.army.mil | huaca2issca0001 | Application | HUACA2ISSCA0001.ds.army.mil | mil.army.ds.HUACA2ISSCA0001 | 2 | 32768.0 | 34757683 | NaN | NaN | 0x80000000000000 | 3 | NaN | NaN | NaN | nCipherLog | NaN | 0 | 2020-09-13T12:05:54Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 2 | 00d81116ba58fc1fff71ffc1e50f10a9 | 1599970054000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | 2020-09-12 21:07:34 t2400: Hardserver [FP]: Notice: Connection to 207.133.219.149:9004 failed: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_huaca2issca0001_application_2020_09_13_huaca2issca0001-application-2020-09-13-14-49-28-852.xml.zip | NaN | ds.army.mil | huaca2issca0001 | Application | HUACA2ISSCA0001.ds.army.mil | mil.army.ds.HUACA2ISSCA0001 | 1 | 16384.0 | 34738538 | NaN | NaN | 0x80000000000000 | 4 | NaN | NaN | NaN | nCipherLog | NaN | 0 | 2020-09-13T04:07:34Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 3 | 00e47ce60a7977239ea4d92be99fe189 | 1599990816000 | evtx-application-c | U&FOUO | P | NE | A1 | 1.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | nae.ds.army.mil_tobya1nep000001_application_2020_09_13_tobya1nep000001-application-2020-09-13-09-55-12-102.xml.zip,nae.ds.army.mil_tobya1nep000001_application_2020_09_13_tobya1nep000001-application-2020-09-13-21-55-12-547.xml.zip | TOBY | nae.ds.army.mil | tobya1nep000001 | Application | TOBYA1NEP000001.nae.ds.army.mil | mil.army.ds.nae.TOBYA1NEP000001 | 903 | 16384.0 | 224444 | 0.0 | 0.0 | 0x80000000000000 | 0 | 0.0 | Software Protection Platform Service | E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156 | Microsoft-Windows-Security-SPP | NaN | 0 | 2020-09-13T09:53:36Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 4 | 0170600419ccc8b42361641554dcb9d5 | 1600018819000 | evtx-application-c | U&FOUO | P | NE | A1 | 3.0 | NaN | " 1: 20e938bb-df44-45ee-bde1-4e4fe7477f37, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 3: 439e8c91-ff38-4ecb-ba0b-32658680c952, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 4: 5b338ef7-8d99-45cb-bb59-618bd328b4a4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 5: 979d2e65-04b7-44c9-9d7b-ef4028168cba, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 6: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 7: 9e3fde40-d4b3-4c1d-9bde-32735aa19b39, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 8: acf1b4fd-1c55-4f2d-a60b-415ac958ad88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 9: b3ca044e-a358-4d68-9883-aaa2941aca99, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x00000000 251412)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )] 10: c6b0fae3-70ea-4a98-95f2-587dc1ea4131, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 11: c7e5dd52-ef14-4bf6-bc71-1bf5f5794cd0, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 12: d3081572-e3f0-49f5-8b83-ec763c014570, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 13: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 14: dcb88f6f-b090-405b-850e-dabcccf3693f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 15: f002931d-5536-4908-8d93-40ae584e24d6, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] 16: 9d0bb49b-21a1-4354-9981-ec5dd9393961, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )] ",55c92734-d682-4d71-983e-d6ec3f16059f | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | nae.ds.army.mil_druma1nep000003_application_2020_09_13_druma1nep000003-application-2020-09-13-21-55-11-293.xml.zip | DRUM | nae.ds.army.mil | druma1nep000003 | Application | DRUMA1NEP000003.nae.ds.army.mil | mil.army.ds.nae.DRUMA1NEP000003 | 1003 | 16384.0 | 146790 | 0.0 | 0.0 | 0x80000000000000 | 4 | 0.0 | Software Protection Platform Service | E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156 | Microsoft-Windows-Security-SPP | NaN | 0 | 2020-09-13T17:40:19Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 5 | 028f97897fd8765d8afa22eeecc53e74 | 1600027481000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | 2020-09-13 16:04:41 t2252: nFast server: Notice: CreateClient (v1) pid: 5088, process name: C:\Windows\system32\svchost.exe | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_braga2dsviss002_application_2020_09_13_braga2dsviss002-application-2020-09-13-21-55-11-584.xml.zip | NaN | ds.army.mil | braga2dsviss002 | Application | BRAGA2DSVISS002.ds.army.mil | mil.army.ds.BRAGA2DSVISS002 | 1 | 16384.0 | 24297264 | NaN | NaN | 0x80000000000000 | 4 | NaN | NaN | NaN | nCipherLog | NaN | 0 | 2020-09-13T20:04:41Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 6 | 02a05ed461912f5346cdbe327c70f053 | 1599961853000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | caller=svchost.exe | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | nae.ds.army.mil_scotw4nhaaa1a03_application_2020_09_13_scotw4nhaaa1a03-application-2020-09-13-10-55-06-857.xml.zip | NaN | nae.ds.army.mil | scotw4nhaaa1a03 | Application | SCOTW4NHAAA1A03.nae.ds.army.mil | mil.army.ds.nae.SCOTW4NHAAA1A03 | 900 | 16384.0 | 57871 | 0.0 | 0.0 | 0x80000000000000 | 4 | 0.0 | Software Protection Platform Service | E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156 | Microsoft-Windows-Security-SPP | NaN | 0 | 2020-09-13T01:50:53Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 7 | 030780151dbc85f4b8b0f30a43a7fcf6 | 1600018340000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | 2020-09-13 13:32:20 t2252: nFast server: Remote server error: NST Nc21259 received InsecureClose whilst expecting a SetupMiddle message: (InvalidModule) | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_braga2dsviss002_application_2020_09_13_braga2dsviss002-application-2020-09-13-21-55-11-584.xml.zip | NaN | ds.army.mil | braga2dsviss002 | Application | BRAGA2DSVISS002.ds.army.mil | mil.army.ds.BRAGA2DSVISS002 | 2 | 32768.0 | 24293900 | NaN | NaN | 0x80000000000000 | 3 | NaN | NaN | NaN | nCipherLog | NaN | 0 | 2020-09-13T17:32:20Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 8 | 030bf4ec18c13e2dfe4e8fe6bcbb1432 | 1599956182000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | 2020-09-12 17:16:22 t2276: Hardserver [FP]: Notice: RemoteTarget Rt1 broke (RemoteServerFailed, INET/172.20.10.5/9004 (UnknownKeyHash (hash supplied))) | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_rcccw4nhaaa0rfs_application_2020_09_13_rcccw4nhaaa0rfs-application-2020-09-13-07-01-45-179.xml.zip | NaN | ds.army.mil | rcccw4nhaaa0rfs | Application | RCCCW4NHAAA0RFS.ds.army.mil | mil.army.ds.RCCCW4NHAAA0RFS | 1 | 16384.0 | 15925634 | NaN | NaN | 0x80000000000000 | 4 | NaN | NaN | NaN | nCipherLog | NaN | 0 | 2020-09-13T00:16:22Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 9 | 04504e25af9d8836ddf69b871b8e4c73 | 1599997303000 | evtx-application-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | ERROR: openkey_set_protection Unable to autoload cardset in silent mode | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ds.army.mil_huaca2issca0001_application_2020_09_13_huaca2issca0001-application-2020-09-13-14-49-28-852.xml.zip | NaN | ds.army.mil | huaca2issca0001 | Application | HUACA2ISSCA0001.ds.army.mil | mil.army.ds.HUACA2ISSCA0001 | 3 | 49152.0 | 34756602 | NaN | NaN | 0x80000000000000 | 2 | NaN | NaN | NaN | nCipher CSP | NaN | 0 | 2020-09-13T11:41:43Z | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
Last rows
| Id | Timestamp | Data Type | Visibility | ARCHITECTURE | DOMAIN | DOMAINCONTROLLER | DOMAINCONTROLLERNUMBER | EVENTDATA_BINARY | EVENTDATA_DATA | EVENTDATA_DATA_ADDITIONALERRORMESSAGE | EVENTDATA_DATA_ADDITIONALINFORMATION | EVENTDATA_DATA_DN | EVENTDATA_DATA_DOMAINNAME | EVENTDATA_DATA_ERRORMESSAGETEXT | EVENTDATA_DATA_HOSTNAME | EVENTDATA_DATA_PARAM1 | EVENTDATA_DATA_PARAM2 | EVENTDATA_DATA_PARAM3 | EVENTDATA_DATA_REASON | EVENTDATA_DATA_REQUESTID | EVENTDATA_DATA_SCHANNELNAME | EVENTDATA_DATA_SCHANNELTYPE | EVENTDATA_DATA_SUBJECTNAME | EVENTDATA_DATA_USERNAME | EVENTDATA_DATA_WORKSTATIONNAME | EVENTDATA_NAME | FILENAME_INGEST | LOCATION | NETWORK_COLLECTION | SITE_COLLECTION | SYSTEM_CHANNEL | SYSTEM_COMPUTER | SYSTEM_COMPUTER_REVERSE | SYSTEM_EVENTID | SYSTEM_EVENTID_QUALIFIERS | SYSTEM_EVENTRECORDID | SYSTEM_EXECUTION_PROCESSID | SYSTEM_EXECUTION_THREADID | SYSTEM_KEYWORDS | SYSTEM_LEVEL | SYSTEM_OPCODE | SYSTEM_PROVIDER_EVENTSOURCENAME | SYSTEM_PROVIDER_GUID | SYSTEM_PROVIDER_NAME | SYSTEM_SECURITY_USERID | SYSTEM_TASK | SYSTEM_TIMECREATED_SYSTEMTIME | SYSTEM_VERSION | USERDATA_EVENTXML_BINARYDATA | USERDATA_EVENTXML_BINARYDATASIZE | USERDATA_EVENTXML_PARAM1 | USERDATA_EVENTXML_PARAM2 | USERDATA_RMRESTARTEVENT_APPLICATIONS_APPLICATION | USERDATA_RMRESTARTEVENT_NAPPLICATIONS | USERDATA_RMRESTARTEVENT_REBOOTREASONS | USERDATA_RMRESTARTEVENT_RMSESSIONID | USERDATA_RMSESSIONEVENT_RMSESSIONID | USERDATA_RMSESSIONEVENT_UTCSTARTTIME | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 49990 | 0a37c3b0c2eeb07256763941cc451cdc | 1599989865867 | evtx-ntlm-c | U&FOUO | P | SW | A1 | 2.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | BLISW6CLAANBKJ1 | 2.0 | NaN | svc.retinascan.blis | blisnetcb6ns001 | NaN | nasw.ds.army.mil_blisa1swp000002_ntlm_2020_09_13_blisa1swp000002-ntlm-2020-09-13-09-42-52-265.xml.zip | BLIS | nasw.ds.army.mil | blisa1swp000002 | Microsoft-Windows-NTLM/Operational | BLISA1SWP000002.nasw.ds.army.mil | mil.army.ds.nasw.BLISA1SWP000002 | 8004 | NaN | 307045198 | 912.0 | 8660.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T09:37:45.867Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49991 | 0a37dbfb4c068736a3b9fc96db65236d | 1600008014744 | evtx-ntlm-c | U&FOUO | P | SE | A1 | 1.0 | NaN | NaN | NaN | NaN | NaN | NASE | NaN | NaN | NaN | NaN | NaN | NaN | NaN | BUCHW1H1AAWK617 | 2.0 | NaN | svc.buch.ia.oa | BUCHNETCB6NS001 | NaN | nase.ds.army.mil_bucha1sep000001_ntlm_2020_09_13_bucha1sep000001-ntlm-2020-09-13-15-31-41-146.xml.zip | BUCH | nase.ds.army.mil | bucha1sep000001 | Microsoft-Windows-NTLM/Operational | BUCHA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000001 | 8004 | NaN | 19274149 | 932.0 | 9020.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T14:40:14.744Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49992 | 0a37f7542405dd2ed34de8aac7419663 | 1600012937459 | evtx-ntlm-c | U&FOUO | P | SE | A1 | 2.0 | NaN | NaN | NaN | NaN | NaN | NASE | NaN | NaN | NaN | NaN | NaN | NaN | NaN | BUCHW1H1AAWK356 | 2.0 | NaN | svc.buch.ia.oa | BUCHNETCB6NS001 | NaN | nase.ds.army.mil_bucha1sep000002_ntlm_2020_09_13_bucha1sep000002-ntlm-2020-09-13-16-27-42-959.xml.zip | BUCH | nase.ds.army.mil | bucha1sep000002 | Microsoft-Windows-NTLM/Operational | BUCHA1SEP000002.nase.ds.army.mil | mil.army.ds.nase.BUCHA1SEP000002 | 8004 | NaN | 16378109 | 924.0 | 14360.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T16:02:17.459Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49993 | 0a38076bd657b3002d3b0f781722adbc | 1600022667956 | evtx-ntlm-c | U&FOUO | P | SW | A1 | 1.0 | NaN | NaN | NaN | NaN | NaN | NASW | NaN | NaN | NaN | NaN | NaN | NaN | NaN | WSMRW04WAAWKN60 | 2.0 | NaN | svc.scan.wsmr | acas-atec152 | NaN | nasw.ds.army.mil_wsmra1swp000001_ntlm_2020_09_13_wsmra1swp000001-ntlm-2020-09-13-18-45-45-994.xml.zip | WSMR | nasw.ds.army.mil | wsmra1swp000001 | Microsoft-Windows-NTLM/Operational | WSMRA1SWP000001.nasw.ds.army.mil | mil.army.ds.nasw.WSMRA1SWP000001 | 8004 | NaN | 1252494011 | 880.0 | 900.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T18:44:27.956Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49994 | 0a38203550d6ab58958ed945aba536bc | 1599958968813 | evtx-ntlm-c | U&FOUO | P | NW | A1 | 2.0 | NaN | NaN | NaN | NaN | NaN | NANW | NaN | NaN | NaN | NaN | NaN | NaN | NaN | ROCKW0K8AANBAQW | 2.0 | NaN | svc.retina.consumer | ROCKNETCB6NS002 | NaN | nanw.ds.army.mil_rocka1nwp000002_ntlm_2020_09_13_rocka1nwp000002-ntlm-2020-09-13-01-10-01-843.xml.zip | ROCK | nanw.ds.army.mil | rocka1nwp000002 | Microsoft-Windows-NTLM/Operational | ROCKA1NWP000002.nanw.ds.army.mil | mil.army.ds.nanw.ROCKA1NWP000002 | 8004 | NaN | 670135716 | 868.0 | 6724.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T01:02:48.813Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49995 | 0a38248856e6c2910f75ec0fe8626c37 | 1600011243060 | evtx-ntlm-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NASW | NaN | NaN | NaN | NaN | NaN | NaN | NaN | SAMHA02200 | 2.0 | NaN | 9077ee92aa7a | NaN | NaN | nasw.ds.army.mil_jbsaw4nhaah0sw2_ntlm_2020_09_13_jbsaw4nhaah0sw2-ntlm-2020-09-13-15-55-44-694.xml.zip | NaN | nasw.ds.army.mil | jbsaw4nhaah0sw2 | Microsoft-Windows-NTLM/Operational | JBSAW4NHAAH0SW2.nasw.ds.army.mil | mil.army.ds.nasw.JBSAW4NHAAH0SW2 | 8004 | NaN | 400795789 | 704.0 | 1036.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T15:34:03.06Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49996 | 0a3841f351f26c67e175ca16b28e6f9a | 1599956359443 | evtx-ntlm-c | U&FOUO | P | HQ | A1 | 2.0 | NaN | NaN | NaN | NaN | NaN | DAHQ | NaN | NaN | NaN | NaN | NaN | NaN | NaN | AOCPA7-NAS3A | 2.0 | NaN | AOCRB4-CTXHSD10$ | AOCRB4-CTXHSD10 | NaN | dahq.ds.army.mil_aocpa1hqp000002_ntlm_2020_09_13_aocpa1hqp000002-ntlm-2020-09-13-01-35-23-653.xml.zip | AOCP | dahq.ds.army.mil | aocpa1hqp000002 | Microsoft-Windows-NTLM/Operational | AOCPA1HQP000002.dahq.ds.army.mil | mil.army.ds.dahq.AOCPA1HQP000002 | 8004 | NaN | 2194925291 | 872.0 | 9408.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T00:19:19.443Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49997 | 0a3846356efd72b3c64de219ebf1fb51 | 1599956615228 | evtx-ntlm-c | U&FOUO | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NASW | NaN | NaN | NaN | NaN | NaN | NaN | NaN | SAMHA02199 | 2.0 | NaN | 046273682f54 | NaN | NaN | nasw.ds.army.mil_jbsaw4nhaah0sw3_ntlm_2020_09_13_jbsaw4nhaah0sw3-ntlm-2020-09-13-00-31-07-632.xml.zip | NaN | nasw.ds.army.mil | jbsaw4nhaah0sw3 | Microsoft-Windows-NTLM/Operational | JBSAW4NHAAH0SW3.nasw.ds.army.mil | mil.army.ds.nasw.JBSAW4NHAAH0SW3 | 8004 | NaN | 759251841 | 736.0 | 10980.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T00:23:35.228Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49998 | 0a384a0a9af990639de0c17592e3e6fa | 1600010358950 | evtx-ntlm-c | U&FOUO | P | SE | A1 | 1.0 | NaN | NaN | NaN | NaN | NaN | NASE | NaN | NaN | NaN | NaN | NaN | NaN | NaN | GORDA4CVTNPN102 | 2.0 | NaN | SVC.TSAS.SQL.AGENT | GORDA0CVTNPN100 | NaN | nase.ds.army.mil_gorda1sep000001_ntlm_2020_09_13_gorda1sep000001-ntlm-2020-09-13-17-03-55-267.xml.zip | GORD | nase.ds.army.mil | gorda1sep000001 | Microsoft-Windows-NTLM/Operational | GORDA1SEP000001.nase.ds.army.mil | mil.army.ds.nase.GORDA1SEP000001 | 8004 | NaN | 223033625 | 876.0 | 13964.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T15:19:18.95Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |
| 49999 | 0a385219f88c96fb3325a8efe64f616f | 1599960838535 | evtx-ntlm-c | U&FOUO | P | SW | A1 | 2.0 | NaN | NaN | NaN | NaN | NaN | nasw.ds.army.mil | NaN | NaN | NaN | NaN | NaN | NaN | NaN | POLKW0VF35WKAAL | 2.0 | NaN | svc.polkret.admin | POLKNETCB6NS001 | NaN | nasw.ds.army.mil_polka1swp000002_ntlm_2020_09_13_polka1swp000002-ntlm-2020-09-13-01-43-27-974.xml.zip | POLK | nasw.ds.army.mil | polka1swp000002 | Microsoft-Windows-NTLM/Operational | POLKA1SWP000002.nasw.ds.army.mil | mil.army.ds.nasw.POLKA1SWP000002 | 8004 | NaN | 299558664 | 860.0 | 2068.0 | 0x8000000000000000 | 4 | 0.0 | NaN | E5BA83F6-07D0-46B1-8BC7-7E669A1D31DC | Microsoft-Windows-Security-Netlogon | S-1-5-18 | 2 | 2020-09-13T01:33:58.535Z | 0.0 | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN | NaN |